Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SourceCodester — Vulnerabilities & Security Advisories 1985

Browse all 1985 CVE security advisories affecting SourceCodester. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SourceCodester operates as a repository for free and premium source code, scripts, and web applications, primarily serving developers seeking ready-made solutions for rapid deployment. This business model inherently exposes users to significant security risks, as the platform hosts thousands of projects with varying levels of code review. Historically, vulnerabilities found in these downloads frequently include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from outdated frameworks or unpatched dependencies. Privilege escalation flaws are also common, allowing attackers to bypass authentication mechanisms. While SourceCodester does not typically manage post-download security patches, the sheer volume of recorded CVEs highlights systemic issues in code quality assurance. Users relying on these resources must perform rigorous independent security audits, as the platform’s primary focus remains distribution rather than comprehensive vulnerability management or remediation support.

CVE ID Title CVSS Severity Published
CVE-2023-0966 SourceCodester Online Eyewear Shop cross site scripting — Online Eyewear Shop CWE-79 2.4 Low 2023-02-22
CVE-2023-0964 SourceCodester Sales Tracker Management System view_product.php sql injection — Sales Tracker Management System CWE-89 5.0 Medium 2023-02-22
CVE-2023-0963 SourceCodester Music Gallery Site POST Request Users.php access control — Music Gallery Site CWE-284 7.3 High 2023-02-22
CVE-2023-0962 SourceCodester Music Gallery Site GET Request Master.php sql injection — Music Gallery Site CWE-89 6.3 Medium 2023-02-22
CVE-2023-0961 SourceCodester Music Gallery Site GET Request view_music_details.php sql injection — Music Gallery Site CWE-89 6.3 Medium 2023-02-22
CVE-2023-0946 SourceCodester Best POS Management System sql injection — Best POS Management System CWE-89 6.3 Medium 2023-02-21
CVE-2023-0945 SourceCodester Best POS Management System cross site scripting — Best POS Management System CWE-79 3.5 Low 2023-02-21
CVE-2023-0943 SourceCodester Best POS Management System Image save_settings unrestricted upload — Best POS Management System CWE-434 4.7 Medium 2023-02-21
CVE-2023-0938 SourceCodester Music Gallery Site GET Request music_list.php sql injection — Music Gallery Site CWE-89 6.3 Medium 2023-02-21
CVE-2023-0917 SourceCodester Simple Customer Relationship Management System login.php sql injection — Simple Customer Relationship Management System CWE-89 7.3 High 2023-02-19
CVE-2023-0916 SourceCodester Auto Dealer Management System Users.php access control — Auto Dealer Management System CWE-284 6.3 Medium 2023-02-19
CVE-2023-0915 SourceCodester Auto Dealer Management System sql injection — Auto Dealer Management System CWE-89 6.3 Medium 2023-02-19
CVE-2023-0913 SourceCodester Auto Dealer Management System sql injection — Auto Dealer Management System CWE-89 4.7 Medium 2023-02-18
CVE-2023-0912 SourceCodester Auto Dealer Management System sql injection — Auto Dealer Management System CWE-89 4.7 Medium 2023-02-18
CVE-2023-0910 SourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection — Online Pizza Ordering System CWE-89 6.3 Medium 2023-02-18
CVE-2023-0906 SourceCodester Online Pizza Ordering System POST Parameter ajax.php delete_category missing authentication — Online Pizza Ordering System CWE-306 7.3 High 2023-02-18
CVE-2023-0905 SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication — Employee Task Management System CWE-287 7.3 High 2023-02-18
CVE-2023-0904 SourceCodester Employee Task Management System task-details.php sql injection — Employee Task Management System CWE-89 6.3 Medium 2023-02-18
CVE-2023-0903 SourceCodester Employee Task Management System edit-task.php sql injection — Employee Task Management System CWE-89 5.0 Medium 2023-02-18
CVE-2023-0902 SourceCodester Simple Food Ordering System process_order.php cross site scripting — Simple Food Ordering System CWE-79 3.5 Low 2023-02-18
CVE-2023-0883 SourceCodester Online Pizza Ordering System index.php sql injection — Online Pizza Ordering System CWE-89 6.3 Medium 2023-02-17
CVE-2023-0785 SourceCodester Best Online News Portal check_availability.php information exposure — Best Online News Portal CWE-202 3.7 Low 2023-02-12
CVE-2023-0784 SourceCodester Best Online News Portal Login Page sql injection — Best Online News Portal CWE-89 7.3 High 2023-02-12
CVE-2023-0781 SourceCodester Canteen Management System removeOrder.php query sql injection — Canteen Management System CWE-89 6.3 Medium 2023-02-11
CVE-2023-0774 SourceCodester Medical Certificate Generator App action.php sql injection — Medical Certificate Generator App CWE-89 7.3 High 2023-02-10
CVE-2023-0732 SourceCodester Online Eyewear Shop POST Request Users.php registration cross site scripting — Online Eyewear Shop CWE-79 3.5 Low 2023-02-07
CVE-2023-0707 SourceCodester Medical Certificate Generator App function.php delete_record sql injection — Medical Certificate Generator App CWE-89 5.5 Medium 2023-02-07
CVE-2023-0706 SourceCodester Medical Certificate Generator App manage_record.php sql injection — Medical Certificate Generator App CWE-89 6.3 Medium 2023-02-07
CVE-2023-0686 SourceCodester Online Eyewear Shop HTTP POST Request update_cart sql injection — Online Eyewear Shop CWE-89 5.0 Medium 2023-02-06
CVE-2023-0679 SourceCodester Canteen Management System removeUser.php sql injection — Canteen Management System CWE-89 5.0 Medium 2023-02-06

This page lists every published CVE security advisory associated with SourceCodester. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.